Static task
static1
Behavioral task
behavioral1
Sample
c89635522a9dccacd3aca0456e083bb0b5145af4120c832e0f7b034266f5132a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c89635522a9dccacd3aca0456e083bb0b5145af4120c832e0f7b034266f5132a.exe
Resource
win10v2004-20221111-en
General
-
Target
c89635522a9dccacd3aca0456e083bb0b5145af4120c832e0f7b034266f5132a
-
Size
747KB
-
MD5
8af0d36a30aedee4d0dc1765b63aaa9a
-
SHA1
976b227ae5363126a642e58ccc72c7dbf802379a
-
SHA256
c89635522a9dccacd3aca0456e083bb0b5145af4120c832e0f7b034266f5132a
-
SHA512
dcc5296f5c40fc98e3b461948ab3023eebbd5b8c7cd3d169ea1ab82fc9148400f431e75a7d2f699eb26b6f89f9b6589b745080bdf25afc554601e811e17551e0
-
SSDEEP
12288:7X6u5nlvwMAFzYZpRS9SUXnutA7/8NDC6wBpp+u7fogLj6K8YR5DAwPbQTLWXz60:7qu5lvtr89SftuMC6wBppjlpXR5DAkwx
Malware Config
Signatures
Files
-
c89635522a9dccacd3aca0456e083bb0b5145af4120c832e0f7b034266f5132a.exe windows x86
4ac46e4a8637ce9b33fe1c4e16763b7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateSemaphoreA
FindVolumeClose
GetFileTime
LocalSize
CancelIo
lstrlenA
GetModuleHandleA
GetFileType
HeapCreate
HeapFree
GetCurrentDirectoryW
GetFileAttributesA
CloseHandle
WaitForMultipleObjects
FindVolumeClose
VirtualQuery
GetTickCount
GetDriveTypeA
ExitThread
GetCommandLineA
FindClose
WriteFile
IsBadReadPtr
CreateDirectoryA
GetModuleFileNameA
uxtheme
GetWindowTheme
CloseThemeData
GetThemeEnumValue
SetWindowTheme
IsThemeActive
GetThemeColor
GetThemeTextMetrics
CloseThemeData
OpenThemeData
GetThemeBool
DrawThemeEdge
GetThemeTextExtent
DrawThemeBackground
fltlib
FilterClose
FilterClose
FilterClose
FilterClose
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 739KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE